The AuthorizeTools.parseAuthoritiesString() method, which is called in ifAnyGranted/ifNotGrated/ifAllGranted expects a comma-separated value as parameter. See if you are passing the right authorities or not.